← Back

CVE-2025-65824

nvd nist
Published: Dec 10, 2025Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bluetooth Low Energy (BLE), resulting in the firmware on the device being overwritten with the attacker's code. As the device does not perform checks on upgrades, this results in Remote Code Execution (RCE) and the victim losing complete access to the Meatmeet.

Affected (1)

Meatmeet
1 product
Meatmeet Pro Wifi & Bluetooth Meat Thermometer Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Meatmeet Pro Wifi & Bluetooth Meat Thermometer Firmware
Version 1.0.34.4
Running on/withPlatform Versions
Meatmeet
Meatmeet Pro Wifi & Bluetooth Meat Thermometer
All versions

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

Source: cve@mitre.org
ExploitThird Party Advisory
Source: cve@mitre.org
ExploitThird Party Advisory

Timeline

No history available yet.